CVE-2006-0323

Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:realnetworks:helix_player:*:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:realone_player:*:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.0:gold:*:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.0.6:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*
cpe:2.3:a:realnetworks:rhapsody:3:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-03-23 23:06

Updated : 2024-02-28 10:42


NVD link : CVE-2006-0323

Mitre link : CVE-2006-0323

CVE.ORG link : CVE-2006-0323


JSON object : View

Products Affected

realnetworks

  • realplayer
  • realone_player
  • rhapsody
  • helix_player
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer